Man pages › Compared with Linux and the BSDs

`kdb5_util(8)` on Solnix vs Linux and the BSDs

On Solnix, kdb5_util is the illumos /usr/sbin/kdb5_util, which creates, destroys, dumps and loads the Kerberos V5 database and creates stash files. The main difference from FreeBSD is that the stash file option is -f on Solnix and -sf on FreeBSD. Solnix also has no -kv option, and its page does not mention master key rollover.

The manual pages

Solnix: kdb5_util(8) from pkgs.solnix.illumos-world-man · illumos.org
FreeBSD: kdb5_util(8) 15.1-RELEASE

What Solnix runs

A default Solnix system runs the illumos kdb5_util at /usr/sbin/kdb5_util. No other variants are shipped. The bundle contains a counterpart page only for FreeBSD, so nothing here is claimed about Linux, OpenBSD or NetBSD. The FreeBSD page in the bundle is trimmed to NAME, SYNOPSIS, DESCRIPTION, ENVIRONMENT and SEE ALSO, so it documents no individual options or commands.

Differences

Compared with	Topic	What differs
FreeBSD	stash file option	Solnix takes the stash file name with `-f` stashfile_name. The FreeBSD synopsis spells it `-sf` stashfilename. A script that passes `-f` to FreeBSD kdb5_util will not match the documented syntax. Source: Solnix kdb5_util(8) SYNOPSIS, -f; FreeBSD kdb5_util(8) SYNOPSIS (-sf)
FreeBSD	master key version (`-kv`)	The FreeBSD synopsis has `-kv` mkeyVNO. The Solnix synopsis and OPTIONS list no `-kv`. Source: FreeBSD kdb5_util(8) SYNOPSIS; Solnix kdb5_util(8) SYNOPSIS and OPTIONS
FreeBSD	master key rollover	The FreeBSD page says kdb5_util can perform live rollover of the master key. The Solnix page documents no rollover. Its only master-key re-encryption is dump `-mkey_convert` or `-new_mkey_file`, which changes the dump file and leaves the database unchanged. Source: FreeBSD kdb5_util(8) DESCRIPTION; Solnix kdb5_util(8) dump -mkey_convert, -new_mkey_file
FreeBSD	default paths	Solnix documents defaults: database `/var/krb5/principal` (with .db appended to a name given with `-d`) and stash file `/var/krb5/.k5.realm.` The FreeBSD page in the bundle states no default database or stash file path. Source: Solnix kdb5_util(8) -d, create, stash; FreeBSD kdb5_util(8) (no default paths given)
FreeBSD	command argument and documented subcommands	Solnix documents the commands create `-s`, destroy, stash, dump and load, with their options, including the dump formats `-old`, `-b6`, `-b7` and `-ov`. The FreeBSD page only says databases can be created, destroyed, dumped and loaded, and that a stash file can be made. It lists no command options. Source: Solnix kdb5_util(8) OPERANDS; FreeBSD kdb5_util(8) SYNOPSIS (command [command_options]) and DESCRIPTION
FreeBSD	behaviour when the database cannot be opened	FreeBSD documents that kdb5_util tries to get the master key and open the database, and carries on even if that fails, because the database may not exist yet or the stash file may be corrupt. The Solnix page does not say. Source: FreeBSD kdb5_util(8) DESCRIPTION; Solnix kdb5_util(8) (not documented)
FreeBSD	option consistency on create and destroy	Solnix says that if `-f`, `-k` or `-M` is used when creating a database, the same options must be used when modifying or destroying it. The FreeBSD page does not say. Source: Solnix kdb5_util(8) create -s; FreeBSD kdb5_util(8) (not documented)
FreeBSD	`-x` database arguments	Solnix lists the `-x` db_args it supports: LDAP binddn, bindpwd, nconns and port, and dbname for the Berkeley-db2 plug-in. FreeBSD accepts `-x` db_args but the page says only that some KDC database modules may not support all commands. Source: Solnix kdb5_util(8) -x; FreeBSD kdb5_util(8) SYNOPSIS and DESCRIPTION
FreeBSD	environment variables	The FreeBSD page has an ENVIRONMENT section that refers to the kerberos page. The Solnix page, as trimmed in the bundle, has no ENVIRONMENT section. Source: FreeBSD kdb5_util(8) ENVIRONMENT; Solnix kdb5_util(8) (no ENVIRONMENT section)

Standards

POSIX: kdb5_util is not a POSIX.1-2024 utility.
Solnix: Interface Stability: Evolving.

Writing portable scripts

Do not hard-code the stash file option. Solnix documents -f and FreeBSD documents -sf, so branch on the OS or check the local page.
Do not assume the default database or stash file location. Solnix uses /var/krb5/principal and /var/krb5/.k5.realm, and the FreeBSD page does not state its defaults, so pass -d and the stash file option explicitly.

Every difference here is taken from the manual pages linked above: Solnix's published page, Linux (man-pages and the GNU and util-linux manuals), FreeBSD, OpenBSD and NetBSD. Each row names its source. Where a manual is silent, this page is too. Compiled 2026-10-26. Found a mistake? Mail hackers@lists.solnix.io.